$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa File: 0426cb98-746d-3839-bac8-901e588c81ba.roa (raw, json) Hash identifier: 81ashS5ePdVkOG28KeLRLG6bZaLpqMx8DmpufpgEH0w= Subject key identifier: 57:E0:3D:2D:AC:82:59:79:BE:71:0B:90:CD:07:3F:EA:00:8F:C7:EF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AABB3CCC437288F8D246A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:bb:3c:cc:43:72:88:f8:d2:46:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=9732b37f-2055-4fff-82e3-6fdb8758007c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:be:e2:17:d9:96:a4:1f:37:b3:86:75:2d: 13:11:21:4c:8d:55:20:91:e6:bf:7c:a5:3b:6a:1d: e4:dc:97:fb:6b:7e:e5:26:38:f5:37:b1:de:5f:7f: 15:4d:f8:07:89:3d:5c:9a:d9:21:ef:d3:13:35:2d: 57:dd:82:7d:bf:e6:b6:22:51:5e:b5:b6:2f:c6:aa: 2e:d3:ad:fa:02:cc:18:6b:6b:fb:a8:87:b7:6f:f3: 7c:66:0e:0c:04:ab:7d:01:88:e6:fb:b9:91:d2:f5: 83:28:a1:c1:8b:05:53:ae:ee:0d:85:ac:d8:b8:d4: f6:77:e5:f2:ab:3f:75:2f:7c:2f:c8:05:cb:53:6c: 16:1b:7c:c4:b1:54:3c:3f:d2:72:d8:74:ae:5c:82: 48:4c:4b:fe:0a:57:ea:d7:42:0c:8b:63:87:89:6f: fd:fb:7d:30:ad:80:22:e1:c0:30:35:ff:5d:7c:20: 36:37:d2:f9:17:a2:01:77:85:71:f7:32:ae:0b:1c: ae:45:a7:ab:3e:31:65:83:af:4e:d3:12:10:f9:ab: 95:ec:e8:50:78:58:86:18:e1:18:7f:c6:2e:c0:f0: 8b:10:d9:0f:d8:5f:af:17:d1:e4:94:4e:2a:60:fa: e9:a7:47:e6:85:30:e9:24:39:ee:ae:5e:af:fc:fe: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E0:3D:2D:AC:82:59:79:BE:71:0B:90:CD:07:3F:EA:00:8F:C7:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4e:50:cc:87:03:95:b9:4e:b3:5f:08:21:c2:9c:62:de:dc: 6d:89:e4:57:4e:27:39:2e:2a:38:c7:2b:eb:c2:16:f8:97:c0: be:0f:75:55:42:fa:08:ae:13:34:bc:9e:f7:88:ed:5d:3b:38: 53:dc:98:23:f6:14:f3:70:37:eb:fe:11:ac:14:d4:a3:3d:8c: 52:e4:6b:cc:35:a0:40:af:3f:fd:98:68:67:23:e2:54:46:49: f0:d7:64:e9:27:b4:f1:11:95:c9:72:05:5d:9c:6c:e6:7c:65: 7a:35:82:fe:a8:51:ed:b3:9f:16:0b:e4:63:d4:0a:19:b9:fc: 8c:63:6b:69:c0:9c:43:cf:69:bc:50:68:04:04:7f:34:98:3a: 8c:c3:c1:61:e2:d9:b2:85:25:65:66:dc:1a:63:39:d4:be:1a: ed:8d:87:64:8e:db:16:3a:51:85:75:5c:a5:37:8e:ef:fa:09: a3:eb:80:bc:fa:93:f8:1c:9e:65:27:ee:cf:f0:9a:9a:2b:8b: 72:17:32:b9:bf:49:55:bd:62:87:6f:13:b5:70:fe:ce:6a:83: f7:57:20:de:3a:5e:da:c6:6c:6d:b3:2e:0f:e1:09:6d:a1:c3: 42:f1:bd:72:18:f7:47:ef:3f:3c:0b:70:cb:c9:e9:48:f2:16: 99:85:5c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrs8zENyiPjSRqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OTczMmIzN2YtMjA1NS00ZmZmLTgyZTMtNmZkYjg3NTgwMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCq+4hfZlqQfN7OGdS0TESFMjVUgkea/fKU7 ah3k3Jf7a37lJjj1N7HeX38VTfgHiT1cmtkh79MTNS1X3YJ9v+a2IlFetbYvxqou 0636AswYa2v7qIe3b/N8Zg4MBKt9AYjm+7mR0vWDKKHBiwVTru4NhazYuNT2d+Xy qz91L3wvyAXLU2wWG3zEsVQ8P9Jy2HSuXIJITEv+Clfq10IMi2OHiW/9+30wrYAi 4cAwNf9dfCA2N9L5F6IBd4Vx9zKuCxyuRaerPjFlg69O0xIQ+auV7OhQeFiGGOEY f8YuwPCLENkP2F+vF9HklE4qYPrpp0fmhTDpJDnurl6v/P5BpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfgPS2sgll5vnELkM0HP+oAj8fvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQyNmNiOTgtNzQ2ZC0z ODM5LWJhYzgtOTAxZTU4OGM4MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADROUMyHA5W5TrNfCCHCnGLe3G2J5FdOJzkuKjjHK+vCFviXwL4PdVVC +giuEzS8nveI7V07OFPcmCP2FPNwN+v+EawU1KM9jFLka8w1oECvP/2YaGcj4lRG SfDXZOkntPERlclyBV2cbOZ8ZXo1gv6oUe2znxYL5GPUChm5/Ixja2nAnEPPabxQ aAQEfzSYOozDwWHi2bKFJWVm3BpjOdS+Gu2Nh2SO2xY6UYV1XKU3ju/6CaPrgLz6 k/gcnmUn7s/wmpori3IXMrm/SVW9YodvE7Vw/s5qg/dXIN46XtrGbG2zLg/hCW2h w0LxvXIY90fvPzwLcMvJ6UjyFpmFXJk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:46 2026 by rpki-client